Cookies Policy
Last updated: October 2026
Cookies are small text files that a website stores on your device. Some are essential, and some are optional. In this policy, ‘cookies’ also includes similar technologies, such as browser local storage.
Definitions we use in this document
"The Service" means our ExpensePlus software, which is accessed online through a web browser.
"This Website" refers to this marketing website where this policy is hosted.
"Fund Accounting Blog" refers to the blog that we provide.
"LoveGiving" refers to the donation platform that we provide.
"you" and "your" means the person using This Website or The Service.
"your Organisation" means the church, charity or other organisation that has opened an ExpensePlus account.
"us", "we" and "our" refer to ExpensePlus Ltd.
What cookies we use
We use two main types of cookies as part of using This Website and as part of using The Service:
- First-party cookies - These cookies are created by us and used directly for the functioning of The Service and This Website.
- Third-party cookies - These cookies are not set by us but instead by other companies. Cookies from Google reCAPTCHA and Stripe, which we use to provide and protect The Service, are listed under ‘Necessary cookies’. Cookies from Help Scout, which we use for support on This Website, are listed under ‘Functional and support cookies’. Those from Google Analytics are covered under ‘Analytics cookies’.
Where the law requires it, we ask for your consent before setting cookies or similar technologies, in line with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR.
Necessary cookies
These cookies are necessary for the correct operation of This Website and The Service. Without them, The Service and/or This Website may not operate correctly. They are switched on by default. A ‘session’ cookie is deleted when you close your browser.
| Cookie name | Where is it used? | How long does the cookie remain for? | What type of cookie is it? | What's the purpose of the cookie? |
|---|---|---|---|---|
| _grecaptcha | This Website, LoveGiving & The Service | 6 months | Third-party cookie & local storage | Set by Google reCAPTCHA to assess whether interactions come from a human or a bot, to protect our forms |
| PHPSESSID | The Service | Session | First-party cookie | A session token that is used to identify you and your session with The Service after you have signed in |
| device_token | The Service | 60 days since last sign-in | First-party cookie | A security token that is used to detect sign-ins with new/unrecognised devices |
| rc::* | This Website, LoveGiving & The Service | Persistent (until cleared) | Third-party local storage | Used by Google reCAPTCHA to assess whether interactions come from a human or a bot, to protect our forms |
| __cf_bm | LoveGiving | 1 hour | Third-party cookie | Set by hCaptcha to help stop fraud (advanced fraud detection) |
| __ep_consent | This Website & The Service | 1 year | First-party cookie | Remembers your cookie banner consent preferences so you are not prompted to choose on every visit |
| webauthn | The Service | Persistent (until cleared) | First-party local storage | Securely stores which email addresses on this device have Touch ID (WebAuthn) sign-in set up, so that the Touch ID option appears when you choose to use it. |
| __stripe_mid | LoveGiving & The Service | 1 year | Third-part cookie | This is a cookie set by Stripe and is required as a means of fraud prevention. |
| __stripe_sid | LoveGiving & The Service | 30 minutes | Third-part cookie | This is a cookie set by Stripe and is required as a means of fraud prevention. |
Functional and support cookies
Functional and support cookies help provide features you ask to use, such as the ‘Contact Us’ pop-up, and help us thank the organisation that referred you to ExpensePlus. We only set these cookies after you have confirmed your cookie preferences in our cookie banner and chosen to allow them. You can change your choice or explicitly withdraw your consent at any time using the ‘Cookie settings’ link at the bottom of any page. If you do not allow these cookies, the ‘Contact Us’ pop-up may not work, but you can still contact us at support@expenseplus.co.uk.
| Cookie name | Where is it used? | How long does the cookie remain for? | What type of cookie is it? | What's the purpose of the cookie? |
|---|---|---|---|---|
| hs-beacon-* | This Website | Persistent (until cleared) | Third-party local storage | Help Scout is our third-party support platform. Part of its functionality is a ‘Contact Us’ pop-up, which uses this local storage. While not essential, it is required to use the contact support pop-up on This Website. |
Preference cookies
These remember how you’ve chosen to set up the way The Service looks or works. We don’t ask for consent for them because we use them only for that purpose. You can change this at any time by unpinning the navigation. Preference cookies do not appear in a cookie banner because they do not need consent.
| Cookie name | Where is it used? | How long does the cookie remain for? | What type of cookie is it? | What's the purpose of the cookie? |
|---|---|---|---|---|
| __ep_main_nav | The Service | 1 year | First-party cookie | Remembers your preference to have the main navigation pinned open |
| __ep_scroll_data | The Service | Temporary (until next visit) | First-party local storage | Remembers your scroll position to seamlessly return the user back to where they were on screen after a page reload/refresh |
Analytics cookies
Analytics cookies are created only when you choose to opt in to their usage from our cookie banner. If you choose to reject non-essential cookies, then these will not be stored in your browser. You can completely withdraw your consent for these cookies at any time using the ‘Cookie settings’ link at the bottom of any page.
| Cookie name | Where is it used? | How long does the cookie remain for? | What type of cookie is it? | What's the purpose of the cookie? |
|---|---|---|---|---|
| _ga, _ga_* | Fund Accounting Blog & This Website | 2 years | Third-party cookie | When consent is granted, these cookies are used by Google Analytics to distinguish visitors and record how the ExpensePlus website is used, for example which pages are visited. You can read Google’s privacy policy here. |
Google Analytics sets cookies on your device. You can accept or reject these in our cookie banner, and change your choice or withdraw consent at any time using the ‘Cookie settings’ link at the bottom of any page. If you do not consent, we do not use Google Analytics cookies.
Google may process information collected through Google Analytics outside the UK, including in the United States. Google participates in the UK Extension to the EU–US Data Privacy Framework (the ‘UK–US data bridge’). Where that does not apply, Google relies on standard contractual clauses with the UK Addendum. For more detail, see our privacy policy and Google’s information about international data transfers.
You can also stop Google Analytics collecting data about your visits by installing the Google Analytics opt-out browser add-on.
Cookies in The Service
The Service uses only cookies that are necessary, or that remember your preferences, such as the cookie that keeps you signed in. If you block them, you will not be able to sign-in. We do not use advertising cookies, and we do not use cookies in the Service to track you across other websites or for marketing purposes.
Separately from cookies, our servers keep log files when you use The Service. These record information such as your IP address, the pages you visit, when you access them and changes made within The Service. An IP address is personal data. We process this information on behalf of your Organisation so that you can access and use The Service, and our session cookies link your activity to your signed-in session. For more detail on how we handle this data, see our privacy policy.
Third-party content
Pages on our website that embed content from sites such as YouTube may set cookies from those sites once you interact with them (for example, by playing a video). We do not control these cookies. Please check those sites’ own notices.
To manage cookies, you can use your browser settings. Each browser is different, so check its Help menu, or see the guidance for Chrome, Microsoft Edge, Firefox and Safari. The website aboutcookies.org has more information, including how to delete cookies.
Changes to this policy
We review this policy annually, but we will also update it if we change which cookies we use, so we recommend checking back for updates in the future. Any changes relating to how we process your data will also be covered in our privacy policy.
Contact us
If you have any questions about this policy or how we use cookies, please email dpo-contact@expenseplus.co.uk or write to The Data Protection Officer, ExpensePlus Ltd, Headingley Enterprise & Arts Centre, Bennett Road, Leeds, England, LS6 3HN. ExpensePlus Ltd is registered in England and Wales (company number 09404009).